Amer Networks E5Web GUI - Manual (Page 85)

• The external RADIUS server itself must be correctly configured.
Source IP Selection
By default, the Source IP property will be set to Automatic and the IP address of the security
gateway's sending interface will be used as the source address for traffic sent to the RADIUS
server. If this property is set to Manual, a specific source IP address can be used for traffic sent to
the server.
If the source IP address is specified, the administrator must also manually configure cOS Core to
ARP publish the IP address on the sending interface. Doing this is described in Section 3.5.3, “ARP
Publish”.
Further RADIUS Considerations
Some important points should be noted about RADIUS activation:
• RADIUS Accounting will not function where a connection is subject to a FwdFast rule in the IP
rule set.
• The same RADIUS server does not need to handle both authentication and accounting; one
server can be responsible for authentication while another is responsible for accounting
tasks.
• Multiple RADIUS servers can be configured in cOS Core to deal with the event when the
primary server is unreachable.
Example 2.21. RADIUS Accounting Server Setup
This example shows configuring of cOS Core with a local RADIUS server called my-accounting
using IP address 192.168.3.1 and port 1813. Assume the shared secret is 231562514098273.
Command-Line Interface
Device:/> add RadiusAccounting my-accounting
IPAddress=192.168.3.1
SharedSecret=231562514098273
Port=1813
RetryTimeout=2
RoutingTable=main
InControl
Follow the same steps used for the Web Interface below.
Web Interface
1. Go to: Policies > User Authentication > RADIUS > Add > RADIUS Server
2. Now enter:
• Name: my-accounting
• IP Address: 192.168.3.1
Chapter 2: Management and Maintenance
85